2016-07-03 17:13:34 +02:00
|
|
|
#!/bin/bash
|
|
|
|
|
#
|
|
|
|
|
# .---. . .
|
|
|
|
|
# | | |
|
|
|
|
|
# |--- .--. .-. .-. .-.| .-. .--.--. |.-. .-. .--. .-.
|
|
|
|
|
# | | (.-' (.-' ( | ( )| | | | )( )| | (.-'
|
|
|
|
|
# ' ' --' --' -' - -' ' ' -' -' -' ' - --'
|
|
|
|
|
#
|
|
|
|
|
# Freedom in the Cloud
|
|
|
|
|
#
|
|
|
|
|
# IRC server application
|
|
|
|
|
#
|
|
|
|
|
# License
|
|
|
|
|
# =======
|
|
|
|
|
#
|
|
|
|
|
# Copyright (C) 2014-2016 Bob Mottram <bob@robotics.uk.to>
|
|
|
|
|
#
|
|
|
|
|
# This program is free software: you can redistribute it and/or modify
|
|
|
|
|
# it under the terms of the GNU Affero General Public License as published by
|
|
|
|
|
# the Free Software Foundation, either version 3 of the License, or
|
|
|
|
|
# (at your option) any later version.
|
|
|
|
|
#
|
|
|
|
|
# This program is distributed in the hope that it will be useful,
|
|
|
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
|
|
# GNU Affero General Public License for more details.
|
|
|
|
|
#
|
|
|
|
|
# You should have received a copy of the GNU Affero General Public License
|
|
|
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
|
|
|
|
|
|
IRC_PORT=6697
|
|
|
|
|
IRC_ONION_PORT=6697
|
|
|
|
|
|
|
|
|
|
# An optional password to log into IRC. This applies to all users
|
|
|
|
|
IRC_PASSWORD=
|
|
|
|
|
|
2016-07-03 23:21:50 +02:00
|
|
|
function remove_irc_server {
|
|
|
|
|
if ! grep -Fxq "install_irc_server" $COMPLETION_FILE; then
|
|
|
|
|
return
|
|
|
|
|
fi
|
|
|
|
|
systemctl stop ngircd
|
|
|
|
|
apt-get -y remove --purge ngircd
|
|
|
|
|
if [ -d /etc/ngircd ]; then
|
|
|
|
|
rm -rf /etc/ngircd
|
|
|
|
|
fi
|
|
|
|
|
iptables -D INPUT -p tcp --dport $IRC_PORT -j ACCEPT
|
|
|
|
|
iptables -D INPUT -p tcp --dport 1024:65535 --sport $IRC_PORT -j ACCEPT
|
|
|
|
|
function_check save_firewall_settings
|
|
|
|
|
save_firewall_settings
|
|
|
|
|
sed -i '/install_irc_server/d' $COMPLETION_FILE
|
|
|
|
|
sed -i '/IRC /d' $COMPLETION_FILE
|
2016-07-03 23:31:45 +02:00
|
|
|
sed -i '/configure_firewall_for_irc/d' $COMPLETION_FILE
|
2016-07-03 23:21:50 +02:00
|
|
|
}
|
|
|
|
|
|
2016-07-03 19:52:57 +02:00
|
|
|
function configure_firewall_for_irc {
|
|
|
|
|
if [ ! -d /etc/ngircd ]; then
|
|
|
|
|
return
|
|
|
|
|
fi
|
|
|
|
|
if grep -Fxq "configure_firewall_for_irc" $COMPLETION_FILE; then
|
|
|
|
|
return
|
|
|
|
|
fi
|
|
|
|
|
if [[ $INSTALLED_WITHIN_DOCKER == "yes" ]]; then
|
|
|
|
|
# docker does its own firewalling
|
|
|
|
|
return
|
|
|
|
|
fi
|
|
|
|
|
if [[ $ONION_ONLY != "no" ]]; then
|
|
|
|
|
return
|
|
|
|
|
fi
|
|
|
|
|
iptables -A INPUT -p tcp --dport $IRC_PORT -j ACCEPT
|
|
|
|
|
iptables -I INPUT -p tcp --dport 1024:65535 --sport $IRC_PORT -j ACCEPT
|
|
|
|
|
function_check save_firewall_settings
|
|
|
|
|
save_firewall_settings
|
|
|
|
|
|
|
|
|
|
OPEN_PORTS+=("IRC $IRC_PORT")
|
|
|
|
|
echo 'configure_firewall_for_irc' >> $COMPLETION_FILE
|
|
|
|
|
}
|
|
|
|
|
|
2016-07-03 17:13:34 +02:00
|
|
|
function install_irc_server {
|
|
|
|
|
if [[ $SYSTEM_TYPE == "$VARIANT_WRITER" || $SYSTEM_TYPE == "$VARIANT_MAILBOX" || $SYSTEM_TYPE == "$VARIANT_CLOUD" || $SYSTEM_TYPE == "$VARIANT_SOCIAL" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_DEVELOPER" || $SYSTEM_TYPE == "$VARIANT_MESH" ]]; then
|
|
|
|
|
return
|
|
|
|
|
fi
|
|
|
|
|
if grep -Fxq "install_irc_server" $COMPLETION_FILE; then
|
|
|
|
|
return
|
|
|
|
|
fi
|
|
|
|
|
apt-get -y install ngircd
|
|
|
|
|
|
|
|
|
|
if [ ! -d /etc/ngircd ]; then
|
|
|
|
|
echo $"ERROR: ngircd does not appear to have installed. $CHECK_MESSAGE"
|
|
|
|
|
exit 53
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
if [ ! -f /etc/ssl/certs/ngircd.dhparam ]; then
|
|
|
|
|
${PROJECT_NAME}-addcert -h ngircd --dhkey $DH_KEYLENGTH
|
|
|
|
|
function_check check_certificates
|
|
|
|
|
check_certificates ngircd
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
DEFAULTDOMAIN=$DEFAULT_DOMAIN_NAME
|
|
|
|
|
if [[ $SYSTEM_TYPE == "$VARIANT_MESH" ]]; then
|
|
|
|
|
DEFAULTDOMAIN="${DEFAULT_DOMAIN_NAME}.local"
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
# create a login password if needed
|
|
|
|
|
if [ ! $IRC_PASSWORD ]; then
|
|
|
|
|
IRC_PASSWORD="$(create_password ${MINIMUM_PASSWORD_LENGTH})"
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
echo '**************************************************' > /etc/ngircd/motd
|
|
|
|
|
echo $'* F R E E D O M B O N E I R C *' >> /etc/ngircd/motd
|
|
|
|
|
echo '* *' >> /etc/ngircd/motd
|
|
|
|
|
echo $'* Freedom in the Cloud *' >> /etc/ngircd/motd
|
|
|
|
|
echo '**************************************************' >> /etc/ngircd/motd
|
|
|
|
|
sed -i 's|MotdFile = /etc/ngircd/ngircd.motd|MotdFile = /etc/ngircd/motd|g' /etc/ngircd/ngircd.conf
|
|
|
|
|
sed -i "s/irc@irc.example.com/$MY_EMAIL_ADDRESS/g" /etc/ngircd/ngircd.conf
|
|
|
|
|
sed -i "s/irc.example.net/$DEFAULTDOMAIN/g" /etc/ngircd/ngircd.conf
|
|
|
|
|
sed -i "s|Yet another IRC Server running on Debian GNU/Linux|IRC Server of $DEFAULTDOMAIN|g" /etc/ngircd/ngircd.conf
|
|
|
|
|
sed -i 's/;Password = wealllikedebian/Password =/g' /etc/ngircd/ngircd.conf
|
|
|
|
|
sed -i 's|;CertFile = /etc/ssl/certs/server.crt|CertFile = /etc/ssl/certs/ngircd.crt|g' /etc/ngircd/ngircd.conf
|
|
|
|
|
sed -i 's|;DHFile = /etc/ngircd/dhparams.pem|DHFile = /etc/ssl/certs/ngircd.dhparam|g' /etc/ngircd/ngircd.conf
|
|
|
|
|
sed -i 's|;KeyFile = /etc/ssl/private/server.key|KeyFile = /etc/ssl/private/ngircd.key|g' /etc/ngircd/ngircd.conf
|
|
|
|
|
sed -i "s/;Ports =.*/Ports = $IRC_PORT/1" /etc/ngircd/ngircd.conf
|
|
|
|
|
sed -i "s/;Ports =.*/Ports = $IRC_PORT/2" /etc/ngircd/ngircd.conf
|
|
|
|
|
sed -i "s/;Name = #ngircd/Name = #${PROJECT_NAME}/g" /etc/ngircd/ngircd.conf
|
|
|
|
|
sed -i "s/;Topic = Our ngircd testing channel/Topic = ${PROJECT_NAME} chat channel/g" /etc/ngircd/ngircd.conf
|
|
|
|
|
sed -i 's/;MaxUsers = 23/MaxUsers = 23/g' /etc/ngircd/ngircd.conf
|
|
|
|
|
sed -i "s|;KeyFile = /etc/ngircd/#chan.key|KeyFile = /etc/ngircd/#${PROJECT_NAME}.key|g" /etc/ngircd/ngircd.conf
|
|
|
|
|
sed -i "s/;CloakHost = cloaked.host/CloakHost = ${PROJECT_NAME}/g" /etc/ngircd/ngircd.conf
|
|
|
|
|
IRC_SALT="$(create_password 30)"
|
|
|
|
|
if [ -f $IMAGE_PASSWORD_FILE ]; then
|
|
|
|
|
IRC_OPERATOR_PASSWORD="$(printf `cat $IMAGE_PASSWORD_FILE`)"
|
|
|
|
|
else
|
|
|
|
|
IRC_OPERATOR_PASSWORD="$(create_password ${MINIMUM_PASSWORD_LENGTH})"
|
|
|
|
|
fi
|
|
|
|
|
sed -i "s|;CloakHostSalt = abcdefghijklmnopqrstuvwxyz|CloakHostSalt = $IRC_SALT|g" /etc/ngircd/ngircd.conf
|
|
|
|
|
sed -i 's/;ConnectIPv4 = yes/ConnectIPv4 = yes/g' /etc/ngircd/ngircd.conf
|
|
|
|
|
sed -i 's/;MorePrivacy = no/MorePrivacy = yes/g' /etc/ngircd/ngircd.conf
|
|
|
|
|
sed -i 's/;RequireAuthPing = no/RequireAuthPing = no/g' /etc/ngircd/ngircd.conf
|
|
|
|
|
sed -i "s/;Name = TheOper/Name = $MY_USERNAME/g" /etc/ngircd/ngircd.conf
|
|
|
|
|
sed -i "s/;Password = ThePwd/Password = $IRC_OPERATOR_PASSWORD/g" /etc/ngircd/ngircd.conf
|
|
|
|
|
sed -i 's|;Listen =.*|Listen = 0.0.0.0,0.0.0.0:9050,127.0.0.1,127.0.0.1:9050|g' /etc/ngircd/ngircd.conf
|
|
|
|
|
if [ $IRC_PASSWORD ]; then
|
|
|
|
|
sed -i "0,/RE/s/Password =.*/Password =$IRC_PASSWORD/" /etc/ngircd/ngircd.conf
|
|
|
|
|
fi
|
|
|
|
|
# If we are on a mesh then DNS is not available
|
|
|
|
|
if [[ $SYSTEM_TYPE == "$VARIANT_MESH" ]]; then
|
|
|
|
|
sed -i "s/;DNS =.*/DNS = no/g" /etc/ngircd/ngircd.conf
|
|
|
|
|
fi
|
|
|
|
|
# upgrade a cypher
|
|
|
|
|
sed -i 's|SECURE128|SECURE256|g' /etc/ngircd/ngircd.conf
|
|
|
|
|
mkdir /var/run/ircd
|
|
|
|
|
chown -R irc:irc /var/run/ircd
|
|
|
|
|
mkdir /var/run/ngircd
|
|
|
|
|
touch /var/run/ngircd/ngircd.pid
|
|
|
|
|
chown -R irc:irc /var/run/ngircd
|
|
|
|
|
|
|
|
|
|
IRC_ONION_HOSTNAME=$(add_onion_service irc ${IRC_PORT} ${IRC_ONION_PORT})
|
|
|
|
|
if ! grep -q $"IRC onion domain" $COMPLETION_FILE; then
|
|
|
|
|
echo "IRC onion domain:$IRC_ONION_HOSTNAME" >> $COMPLETION_FILE
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
systemctl restart ngircd
|
|
|
|
|
|
|
|
|
|
# keep the daemon running
|
|
|
|
|
echo '' >> /usr/bin/$WATCHDOG_SCRIPT_NAME
|
|
|
|
|
echo '# keep irc daemon running' >> /usr/bin/$WATCHDOG_SCRIPT_NAME
|
|
|
|
|
echo 'IRC_RUNNING=$(pgrep ngircd > /dev/null && echo Running)' >> /usr/bin/$WATCHDOG_SCRIPT_NAME
|
|
|
|
|
echo 'if [ ! $IRC_RUNNING ]; then' >> /usr/bin/$WATCHDOG_SCRIPT_NAME
|
|
|
|
|
echo ' systemctl start ngircd' >> /usr/bin/$WATCHDOG_SCRIPT_NAME
|
|
|
|
|
echo ' echo -n $CURRENT_DATE >> $LOGFILE' >> /usr/bin/$WATCHDOG_SCRIPT_NAME
|
|
|
|
|
echo ' echo " IRC daemon restarted" >> $LOGFILE' >> /usr/bin/$WATCHDOG_SCRIPT_NAME
|
|
|
|
|
echo 'fi' >> /usr/bin/$WATCHDOG_SCRIPT_NAME
|
|
|
|
|
|
|
|
|
|
if ! grep -q $"IRC Server" /home/$MY_USERNAME/README; then
|
|
|
|
|
echo '' >> /home/$MY_USERNAME/README
|
|
|
|
|
echo '' >> /home/$MY_USERNAME/README
|
|
|
|
|
echo $'IRC Server' >> /home/$MY_USERNAME/README
|
|
|
|
|
echo '==========' >> /home/$MY_USERNAME/README
|
|
|
|
|
echo $'To connect to your IRC server in irssi:' >> /home/$MY_USERNAME/README
|
|
|
|
|
echo '' >> /home/$MY_USERNAME/README
|
|
|
|
|
if [[ $ONION_ONLY != 'yes' ]]; then
|
|
|
|
|
echo " irssi" >> /home/$MY_USERNAME/README
|
|
|
|
|
echo " /server add -auto -ssl $DEFAULTDOMAIN $IRC_PORT" >> /home/$MY_USERNAME/README
|
|
|
|
|
echo " /connect $DEFAULT_DOMAIN_NAME" >> /home/$MY_USERNAME/README
|
|
|
|
|
else
|
|
|
|
|
echo " usetorwith irssi" >> /home/$MY_USERNAME/README
|
|
|
|
|
echo " /server add -auto $IRC_ONION_HOSTNAME $IRC_PORT" >> /home/$MY_USERNAME/README
|
|
|
|
|
echo " /connect $IRC_ONION_HOSTNAME" >> /home/$MY_USERNAME/README
|
|
|
|
|
fi
|
|
|
|
|
echo " /join #${PROJECT_NAME}" >> /home/$MY_USERNAME/README
|
|
|
|
|
chown $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/README
|
|
|
|
|
chmod 600 /home/$MY_USERNAME/README
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
function_check configure_firewall_for_irc
|
|
|
|
|
configure_firewall_for_irc
|
|
|
|
|
echo 'install_irc_server' >> $COMPLETION_FILE
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
function install_irc_client {
|
|
|
|
|
if [[ $SYSTEM_TYPE == "$VARIANT_WRITER" || $SYSTEM_TYPE == "$VARIANT_MAILBOX" || $SYSTEM_TYPE == "$VARIANT_CLOUD" || $SYSTEM_TYPE == "$VARIANT_SOCIAL" || $SYSTEM_TYPE == "$VARIANT_MEDIA" || $SYSTEM_TYPE == "$VARIANT_MESH" ]]; then
|
|
|
|
|
return
|
|
|
|
|
fi
|
|
|
|
|
if grep -Fxq "install_irc_client" $COMPLETION_FILE; then
|
|
|
|
|
return
|
|
|
|
|
fi
|
|
|
|
|
apt-get -y install irssi
|
|
|
|
|
|
|
|
|
|
if [ ! -d /home/$MY_USERNAME/.irssi ]; then
|
|
|
|
|
mkdir /home/$MY_USERNAME/.irssi
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
echo 'servers = (' > /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo ' {' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo ' address = "chat.freenode.net";' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo ' chatnet = "Freenode";' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo ' port = "6667";' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo ' autoconnect = "no";' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo ' },' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo ' {' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo ' address = "irc.oftc.net";' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo ' chatnet = "OFTC";' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo ' port = "6667";' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo ' autoconnect = "yes";' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo ' },' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo ' {' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo " address = \"127.0.0.1\";" >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
if [[ $ONION_ONLY == 'no' ]]; then
|
|
|
|
|
echo " port = \"${IRC_PORT}\";" >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo ' use_ssl = "yes";' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
else
|
|
|
|
|
IRC_ONION_HOSTNAME=$(cat $COMPLETION_FILE | grep "IRC onion domain" | awk -F ':' '{print $2}')
|
|
|
|
|
echo " port = \"${IRC_ONION_PORT}\";" >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo ' use_ssl = "no";' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
fi
|
|
|
|
|
echo ' chatnet = "Freedombone";' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo ' ssl_verify = "no";' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo ' autoconnect = "yes";' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
if [ $IRC_PASSWORD ]; then
|
|
|
|
|
echo " password = \"${IRC_PASSWORD}\";" >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
fi
|
|
|
|
|
echo ' }' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo ');' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo '' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo 'chatnets = {' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo ' Freedombone = {' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo ' type = "IRC";' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo ' max_kicks = "1";' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo ' max_msgs = "4";' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo ' max_whois = "1";' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo ' };' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo ' Freenode = {' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo ' type = "IRC";' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo ' max_kicks = "1";' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo ' max_msgs = "4";' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo ' max_whois = "1";' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo ' };' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo ' OFTC = {' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo ' type = "IRC";' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo ' max_kicks = "1";' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo ' max_msgs = "1";' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo ' max_whois = "1";' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo ' };' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo '};' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo '' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo 'channels = (' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo ' { name = "#freedombone"; chatnet = "Freedombone"; autojoin = "Yes"; },' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo ');' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo '' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo 'settings = {' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo " core = { real_name = \"$MY_NAME\"; user_name = \"$MY_USERNAME\"; nick = \"$MY_USERNAME\"; };" >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo ' "fe-text" = { actlist_sort = "refnum"; };' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo '};' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
echo 'ignores = ( { level = "CTCPS"; } );' >> /home/$MY_USERNAME/.irssi/config
|
|
|
|
|
|
|
|
|
|
chown -R $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/.irssi
|
|
|
|
|
|
|
|
|
|
echo 'install_irc_client' >> $COMPLETION_FILE
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
# NOTE: deliberately no exit 0
|
